Adobe InDesign < 20.5.5 / 21.0 < 21.6.0 Multiple Application denial-of-service (APSB26-145) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 20.5.5, 21.6.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-145 advisory. - InDesign Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000572)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000572 advisory. NULL Pointer Dereference in function vimregexecstring at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mutt (UTSA-2023-002883)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002883 advisory. Null pointer dereference when composing from a specially crafted draft message in Mutt 1.5.2 1.5.2 2.2.12 Tenable has extracted the preceding description block...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gnutls (UTSA-2022-001364)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-001364 advisory. A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: LibRaw (UTSA-2026-090036)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090036 advisory. LibRaw::copybayer in librawcxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference. Tenable has extracted the preceding description block directly from the Unity Lin...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: yasm (UTSA-2023-002669)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002669 advisory. Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted...

Unity Linux 20.1070e Security Update: ghostscript (UTSA-2022-001763)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-001763 advisory. A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buffer...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000531)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000531 advisory. NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240. Tenable has extracted the preceding description block directly from the Unity Linux security...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002745)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002745 advisory. NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531. Tenable has extracted the preceding description block directly from the Unity Linux security...

CVE-2026-88339

A NULL pointer dereference vulnerability exists in the gf_sg_vrml_field_clone() function of GPAC 2d7da22e (26.08-DEV) . The flaw is triggered when cloning a PROTO default SFImage field with a NULL source pointer. An attacker can exploit this by providing a specially crafted input file , which res...

PT-2026-97025

Name of the Vulnerable Software and Affected Versions GPAC version 2d7da22e 26.08-DEV Description A NULL pointer dereference occurs in the gf sg vrml field clone function when cloning a PROTO default SFImage field with a NULL source pointer. A remote attacker can cause an application crash and...

RockyLinux 9 : gstreamer1-plugins-base (RLSA-2026:69100)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69100 advisory. gstreamer: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow CVE-2026-18297 gstreamer1-plugins-base: gstreamer:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000576)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000576 advisory. NULL Pointer Dereference in function vimregexecstring at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901. NULL Pointer Dereference in function...

CVE-2026-88339

A NULL pointer dereference vulnerability exists in the gfsgvrmlfieldclone function of GPAC 2d7da22e 26.08-DEV. The vulnerability occurs when cloning a PROTO default SFImage field with a NULL source pointer. An attacker can provide a specially crafted input file that triggers the condition,...

CVE-2026-86056: NULL Pointer Dereference

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the NPPMSAVESESSION handler in PowerEditor/src/NppBigSwitch.cpp converts lParam to a sessionInfo pointer and dereferences its nbFile, files, and sessionFilePathName members without checking for null. A process running at the...

CVE-2026-88339

A NULL pointer dereference vulnerability exists in the gfsgvrmlfieldclone function of GPAC 2d7da22e 26.08-DEV. The vulnerability occurs when cloning a PROTO default SFImage field with a NULL source pointer. An attacker can provide a specially crafted input file that triggers the condition,...

CVE-2026-76192: NULL Pointer Dereference

InDesign Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in...

NotepadPlusPlus: CVE-2026-86056: NULL Pointer Dereference

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the NPPMSAVESESSION handler in PowerEditor/src/NppBigSwitch.cpp converts lParam to a sessionInfo pointer and dereferences its nbFile, files, and sessionFilePathName members without checking for null. A process running at the...

PT-2026-96853

Name of the Vulnerable Software and Affected Versions Notepad++ versions prior to 8.9.8 Description The NPPM SAVESESSION handler in PowerEditor/src/NppBigSwitch.cpp converts lParam to a sessionInfo pointer and dereferences its nbFile, files, and sessionFilePathName members without checking for...

CVE-2026-88339: NULL Pointer Dereference

A NULL pointer dereference vulnerability exists in the gfsgvrmlfieldclone function of GPAC 2d7da22e 26.08-DEV. The vulnerability occurs when cloning a PROTO default SFImage field with a NULL source pointer. An attacker can provide a specially crafted input file that triggers the condition,...